apt/methods/gpgv.cc, branch 2.9.35Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.352025-01-21T11:16:34ZRemove superseded warning about trusted.gpg fallback2025-01-21T11:16:34ZJulian Andres Klodejulian.klode@canonical.com2025-01-20T11:31:55Zurn:sha1:e14417db27771ad85f45880974c8f59f05d138f1
This warning has been superseded by the missing sources.list
notice (which will also become a warning shortly)
Adjust the sqv exit to avoid introducing a new spurious
"No good signature" that we did not reach before.
moo
Remove leftovers of the apt-key removal2025-01-05T22:16:09ZDavid Kalnischkiesdavid@kalnischkies.de2024-12-27T02:16:56Zurn:sha1:25cd3ded69a79c2a7eb3d858e041f1509f5f5ed8
References: a00fbbdb28cc31e78882301c2efe7218583ab4cb
Drop the remaining usage of APT_ARRAY_SIZE2025-01-05T22:16:08ZDavid Kalnischkiesdavid@kalnischkies.de2024-12-26T20:46:23Zurn:sha1:1e2b5197ee350a36fbad006f198bbf8e9a5c8e53
That macro is not that useful as it might perhaps once was. Lets prepare
dropping it now in favour of more standard ways of working with arrays
now.
Drop usage of macro APT_OVERRIDE for simple override2025-01-05T22:16:08ZDavid Kalnischkiesdavid@kalnischkies.de2024-12-26T19:41:53Zurn:sha1:f73593a4034d9eec0ec4466b8e173d4a4daece1f
We were rather inconsistent in using it and as our public headers
contain deduction guides (a c++17 feature) it seems silly to try to hide
a c++11 feature in a macro, so lets stop this charade and drop the
macro and while we are changing all these lines lets apply [[nodiscard]]
(another c++17 feature) and other suggestions from clang-tidy and
formatting for a little more consistency.
methods/gpgv: Remove apt-key mentions2024-12-07T14:14:34ZJulian Andres Klodejak@debian.org2024-12-07T14:07:35Zurn:sha1:2bb8a2c71c12063e52220c3a3839e063f11a319dDetect working gpgv using gpgv --dump-options2024-11-28T18:01:36ZJulian Andres Klodejak@debian.org2024-11-28T08:55:57Zurn:sha1:86f8353ce7a343db7b19422db0d37379ac45ff4e
This gains us support for not using an absolute path, which
is nice, and we can now cache the invocation across fork() in
the method.
Still keep preferring absolute paths, this avoids execvp() having
to iterate the path and reduces bug potential with custom gpgv in
/usr/local.
Fix the last entry in the list of gpgvs to say gpgv1
Do not implode key file name vector for calling gpgv2024-11-28T09:17:21ZJulian Andres Klodejak@debian.org2024-11-23T16:45:11Zurn:sha1:0e69c1fa5b8a4a1237933fa47113ea839a66f8a0
Converting it to a comma-separated string and back loses precision.
Only revoke weak RSA keys for now, add 'next' and 'future' levels2024-07-15T17:17:55ZJulian Andres Klodejulian.klode@canonical.com2024-07-15T17:13:58Zurn:sha1:47deb766c0a11c54d122197531279677545459af
Algorithms not in the next level give a warning, algorithms
in not in the future level introduce an audit message for
the --audit flag.
next: >=rsa2048,ed25519,ed448,nistp256,nistp384,nistp512
future: >=rsa3072,ed25519,ed448
LP: #2073126
gpgv: Add a LaterWorthless level, a SoonWorthless but at 'audit' level2024-07-15T17:17:04ZJulian Andres Klodejulian.klode@canonical.com2024-07-15T15:58:08Zurn:sha1:04cb5104a018184fe1fac114cbc212a9395d6845Revert "Temporarily downgrade key assertions to "soon worthless""2024-04-09T17:59:52ZJulian Andres Klodejulian.klode@canonical.com2024-04-09T17:56:26Zurn:sha1:81c65f7e86b8f16eaaa91d9c205a594b0ebde159
We temporarily downgraded the errors to warnings to give the
launchpad PPAs time to be fixed, but warnings are not safe:
Untrusted keys could be hiding on your system, but just not
used at the moment. Hence revert this so we get the errors we
want.
This reverts commit 66998ed3d299bede651ad40368bdb270f5f5b0f9.
LP: #2060721
Gbp-Dch: full